lastpass-cli VS passforios

The other difficulty is it appears there is little-to-no support for API/automation:

https://github.com/lastpass/lastpass-cli/issues/602

https://github.com/lastpass/lastpass-cli/issues/624

https://github.com/lastpass/lastpass-cli/issues/604

...their CLI tool is de-facto deprecated (unsupported) and has several unreliability issues (ie: `lpass ls/userls ...` reports differing amounts of values depending on when a user was added to the folder or not). Basically `lpass ls ... | xargs -n1 ...` cannot be trusted, and you can only get an accurate list of passwords (or users) from the actual GUI.

It makes automation, auditing, reporting, near impossible.

When saving the CSV, do not copy-paste the content of the HTML manually, instead use the popup to download the file that LastPass provides. You might need to allow popups for LastPass extension the first time you perform the export, then perform another one to get the popup.

# 2. Export attachments

Use lastpass-cli to export attachments. A script is provided in version 1.3.4: https://github.com/lastpass/lastpass-cli/blob/v1.3.4/contrib...

https://github.com/lastpass/lastpass-cli/blob/master/contrib/lpass-att-export.sh helped me batch-export my attachments.

You can see the source code for a lastpass client here.

(define-module (lastpass-cli) #:use-module (guix utils) #:use-module (guix packages) #:use-module (guix download) #:use-module (guix build-system cmake) #:use-module (guix licenses) #:use-module (gnu packages bash) #:use-module (gnu packages curl) #:use-module (gnu packages xml) #:use-module (gnu packages gnupg) #:use-module (gnu packages pkg-config) #:use-module (gnu packages tls) ) (define-public lastpass-cli (package (name "lastpass-cli") (version "1.3.3") (source (origin (method url-fetch) (uri (string-append "https://github.com/lastpass/lastpass-cli/releases/download/v" version "/lastpass-cli-" version ".tar.gz")) (sha256 (base32 "06v7d1khk5ylhmf1giqpgq97gsn6mnqhg0637gnryv704wb5jkxr")))) (build-system cmake-build-system) (arguments ;; disable tests? '(#:tests? #f)) (native-inputs (list pkg-config)) (inputs (list bash openssl curl libxml2 pinentry)) (synopsis "Command line interface to LastPass.com") (description "") (home-page "https://github.com/lastpass/lastpass-cli") (license gpl2))) lastpass-cli

Their CLI seems to support showing attachments: https://github.com/lastpass/lastpass-cli/blob/8767b5e53192ad...

FYI for those interested in CLI password management, there is a pretty good CLI for LastPass called lpass that even supports your Yubikeys.

https://github.com/lastpass/lastpass-cli

Yes you can, you can use the https://github.com/mssun/passforios app which as of over a year ago supports Yubikeys.

The UX of having to grab your Yubikey every time is a bit clunky though (although that is limitation of the security key medium itself rather than the app).

But there is, and it supports OTP where if I remember correctly is a paid feature for Bitwarden. https://github.com/mssun/passforios

But who you gonna trust then? It's open source[1] at least, so you can always review it yourself.

But from "paranoid" point of view you can't verify is this is the same code used in app and all of currently available stores lacks in reproducible builds department. So it's always a tradeoff between ease of use and hassle.

[1]: https://github.com/mssun/passforios

https://github.com/mssun/passforios which also uses the safari password manager flow so its pretty seamless

passforios

Many Linux folks use pass, which I personally love for its simplicity and easy way to synch on different devices. There is an iOS (and an android) app.